NetSight
medium5.5

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an …

Impact

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service.

Affected products

VendorProductAffected versions
AmdEpyc 7232p Firmware
before romepi-sp3_1.0.0.d
AmdEpyc 7302p Firmware
before romepi-sp3_1.0.0.d
AmdEpyc 7402p Firmware
before romepi-sp3_1.0.0.d
AmdEpyc 7502p Firmware
before romepi-sp3_1.0.0.d
AmdEpyc 7702p Firmware
before romepi-sp3_1.0.0.d
AmdEpyc 7252 Firmware
before romepi-sp3_1.0.0.d
AmdEpyc 7262 Firmware
before romepi-sp3_1.0.0.d
AmdEpyc 7272 Firmware
before romepi-sp3_1.0.0.d
AmdEpyc 7282 Firmware
before romepi-sp3_1.0.0.d
AmdEpyc 7302 Firmware
before romepi-sp3_1.0.0.d
AmdEpyc 7352 Firmware
before romepi-sp3_1.0.0.d
AmdEpyc 7402 Firmware
before romepi-sp3_1.0.0.d

Weakness classification

References